PT-2006-6643 · Selenium · Seleniumserver Ftp Server

Publicado 2006-11-20 · Atualizado 2017-07-20 · CVE-2006-5982

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions SeleniumServer FTP Server version 1.0, and possibly earlier

Description The issue allows attackers to obtain passwords by reading a file where user passwords are stored in plaintext in the Servers directory.

Recommendations For SeleniumServer FTP Server version 1.0, and possibly earlier, consider changing all passwords stored in the Servers directory to mitigate the risk of exploitation. As a temporary workaround, restrict access to the Servers directory to minimize the risk of attackers reading the plaintext passwords.

Correção

Enumeração de Fraquezas

CWE-310

Identificadores relacionados

CVE-2006-5982

Produtos afetados

Seleniumserver Ftp Server

Referências · 5

• http://secunia.com/advisories/22928 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/30334 · Nota
• http://vupen.com/english/advisories/2006/4540 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2006-5982 · Nota de Segurança
• http://osvdb.org/30449 · Nota